CVE-2002-2392

Severity Score

6.4

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Winamp 2.65 through 3.0 stores skin files in a predictable file location, which allows remote attackers to execute arbitrary code via a URL reference to (1) wsz and (2) wal files that contain embedded code.

*Credits: N/A

CVSS Scores

NISTv2 6.4

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2002-12-31 CVE Published
2007-10-31 CVE Reserved
2024-09-17 CVE Updated
2024-09-17 EPSS Updated
2024-09-17 First Exploit
---------- Exploited in Wild
---------- KEV Due Date

CWE

CAPEC

References (3)

URL	Tag	Source
http://seclists.org/bugtraq/2002/Jul/0205.html	Mailing List
http://www.iss.net/security_center/static/9630.php	Vdb Entry

URL	Date	SRC
http://www.securityfocus.com/bid/5266	2024-09-17

URL	Date	SRC

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				2.65 Search vendor "Nullsoft" for product "Winamp" and version "2.65"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				2.70 Search vendor "Nullsoft" for product "Winamp" and version "2.70"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				2.71 Search vendor "Nullsoft" for product "Winamp" and version "2.71"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				2.72 Search vendor "Nullsoft" for product "Winamp" and version "2.72"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				2.73 Search vendor "Nullsoft" for product "Winamp" and version "2.73"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				2.74 Search vendor "Nullsoft" for product "Winamp" and version "2.74"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				2.75 Search vendor "Nullsoft" for product "Winamp" and version "2.75"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				2.76 Search vendor "Nullsoft" for product "Winamp" and version "2.76"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				2.77 Search vendor "Nullsoft" for product "Winamp" and version "2.77"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				2.78 Search vendor "Nullsoft" for product "Winamp" and version "2.78"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				2.79 Search vendor "Nullsoft" for product "Winamp" and version "2.79"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				2.80 Search vendor "Nullsoft" for product "Winamp" and version "2.80"		-		Affected
Nullsoft Search vendor "Nullsoft"		Winamp Search vendor "Nullsoft" for product "Winamp"				3.1 Search vendor "Nullsoft" for product "Winamp" and version "3.1"		-		Affected